CsrfGuardian.java 文件源码

@Override
public Object aroundReadFrom(ReaderInterceptorContext context)
        throws IOException, WebApplicationException {
    Object entity = context.proceed();
    MediaType mediaType = context.getMediaType();
    if (mediaType != null
            && mediaType.isCompatible(MediaType.APPLICATION_FORM_URLENCODED_TYPE)) {
        Form form = (Form) entity;
        String csrfToken = form.asMap().getFirst("csrfToken");
        if (userProvider.validateCsrfToken(csrfToken) == false) {
            throw new BadRequestException();
        }
    }
    return entity;
}